Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Wofdrmu1CWnwfxbjecGEvqTgJkc.roa
File: Wofdrmu1CWnwfxbjecGEvqTgJkc.roa (raw, json)
Hash identifier: upIvdFbG/6LIO7Chw4ZUYZFiBjsSO/bPnTg+OTk3g7o=
Subject key identifier: 5A:87:DD:AE:6B:B5:09:69:F0:7F:16:E3:79:C1:84:BE:A4:E0:26:47
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A577D0294579E8D6FD097EEFF2C9BF222
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Wofdrmu1CWnwfxbjecGEvqTgJkc.roa
Signing time: Sat 02 Sep 2023 20:02:04 +0000
ROA not before: Sat 02 Sep 2023 20:02:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 5.105.22.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:57:7d:02:94:57:9e:8d:6f:d0:97:ee:ff:2c:9b:f2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 2 20:02:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a87ddae6bb50969f07f16e379c184bea4e02647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:4b:c3:ed:8c:4c:26:b2:35:bb:8a:3d:c9:
fb:33:d2:7f:83:5c:05:81:ca:14:17:25:5a:c4:19:
06:b8:15:4e:8d:9c:4d:cc:e6:78:d4:09:b4:7b:27:
11:78:b4:2c:39:3d:5a:3a:85:ab:01:a7:bc:54:8f:
61:94:a7:2c:d6:3b:c2:30:db:94:55:27:62:31:3e:
15:61:68:55:73:07:73:ab:8b:45:04:88:97:8b:01:
d8:67:c9:e8:36:98:4f:57:6f:c9:a5:0c:19:97:0c:
66:79:ef:a0:fc:ab:1e:4d:bc:04:ea:f7:85:47:6d:
8d:56:9b:41:3c:3b:cd:a9:fb:42:2b:0e:5c:d3:92:
d4:ee:34:98:74:48:28:6b:ac:a0:3a:49:68:b4:68:
fd:37:df:6d:b5:82:16:a2:fb:d7:78:06:a2:ee:fe:
0a:01:c2:11:03:02:54:f4:d7:a9:36:a2:e4:e8:fc:
bb:f0:9b:29:58:7b:3c:f8:50:7f:8a:3f:10:50:c2:
3d:20:a6:32:09:49:5e:9d:d0:58:3b:eb:07:bf:60:
bf:24:6a:a8:d4:a7:90:6a:67:48:fc:7c:d2:0e:18:
bb:96:02:0a:5d:76:6c:19:e0:61:ca:61:4e:02:20:
f8:23:fe:64:30:f8:da:96:48:01:d6:2d:8c:02:d3:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:87:DD:AE:6B:B5:09:69:F0:7F:16:E3:79:C1:84:BE:A4:E0:26:47
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Wofdrmu1CWnwfxbjecGEvqTgJkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.22.0/24
5.105.142.0/24
5.105.207.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a3:2c:15:fa:af:fb:52:79:62:03:e9:66:06:34:4d:45:64:
de:da:85:26:cc:fd:5c:6e:ba:85:2a:a9:d0:33:a9:61:f5:a5:
9e:87:e2:6b:9a:ef:be:6b:58:3b:6c:b5:d8:07:d0:26:e7:db:
45:16:62:aa:83:bb:07:19:fd:2e:20:9a:94:58:40:4b:83:d6:
e3:40:a7:c9:01:01:73:13:63:b5:86:b6:a3:7f:82:7f:e2:8f:
c5:d2:17:0d:da:9a:85:86:a2:24:22:19:61:e4:62:ea:70:4d:
7f:f9:1c:b5:ed:de:a3:84:0d:8c:c5:a9:e5:82:ca:45:ae:52:
61:f9:7b:fa:56:3b:7d:ae:ac:82:49:fa:92:fb:6a:42:84:b2:
bd:64:cc:b4:93:03:bf:5b:65:df:dc:35:d7:2d:ba:fc:9c:11:
d7:bd:2d:a1:db:3a:5d:e4:6e:5e:d3:91:84:a0:a4:75:94:9d:
00:83:23:a1:12:d7:ef:0f:cc:32:29:b5:e1:26:18:35:17:3b:
0b:0e:69:f2:9c:37:bb:4e:2e:95:2c:ba:a3:19:41:11:8f:c9:
59:02:d1:f2:1c:77:33:80:74:1e:2e:61:2a:d3:09:db:a4:33:
fa:f5:99:49:9a:bc:a8:1a:a2:3b:7c:f6:fe:d3:3c:6c:20:55:
dc:d4:25:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 15:12:07 2023 by rpki-client on console-fra.rpki-client.org